
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier: W/hxoi07oVpTSQ0YjpQtx0fogFexYDpseV+NcLIJOYc=
Subject key identifier: FC:3F:4C:A9:DD:73:7E:C9:23:9F:FE:01:27:46:B6:DC:69:7B:F4:BB
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 050E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number: 04E3
Signing time: Fri 12 Jun 2026 23:52:40 +0000
Manifest this update: Fri 12 Jun 2026 23:52:39 +0000
Manifest next update: Fri 19 Jun 2026 23:52:39 +0000
Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: pxgVnx8vYeLRS8FDdj//Z7OD2gtgLrKBGJXVFvkDUOg=)
2: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: ETprqd4TG0fz1XKpXzLSp0H4HleJTU3ZCwBa2O0/5NQ=)
3: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: 0P3dqvWYda9lLWl1wge90QahspxZ2fOocNpXJvgS+I0=)
4: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (hash: vVW7527z8oKpKM3+fK3b3v+qQSbJYZfIJ5Q7l1xCldg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: Jun 12 23:52:39 2026 GMT
Not After : Jun 19 23:52:39 2026 GMT
Subject: CN=6a2c9bc8-2f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:1f:fc:76:c9:44:87:57:39:b5:ac:93:96:
24:3e:43:29:83:f7:76:ce:39:5d:3d:6b:c1:ee:fc:
77:3b:6a:3c:21:13:1b:71:57:83:df:9f:20:56:65:
e1:ca:70:63:53:33:40:91:1c:bf:61:bc:b7:96:26:
38:ec:74:86:51:6a:3d:76:ff:8e:d7:a9:df:7b:31:
d6:94:03:0d:05:70:77:c5:dc:ea:43:6f:3a:d7:f3:
70:b6:5f:ec:94:91:fc:b4:60:21:a8:02:fe:3e:59:
5e:62:32:1e:0d:7c:67:c9:e9:ce:25:bf:63:b0:dc:
69:57:28:21:c9:a3:ad:74:a7:06:30:44:9e:e6:6a:
76:f2:28:cc:25:71:40:ce:97:a8:59:05:d1:e5:9d:
4a:ca:8d:c7:39:f1:15:75:25:c4:df:54:db:b5:9c:
4b:aa:12:c2:dd:e4:41:18:5c:02:aa:70:95:d5:c5:
32:9b:9a:24:c6:72:19:b3:c8:df:41:5d:85:8e:af:
f6:c4:ed:5f:ce:b3:4a:4a:19:ad:10:0a:6c:67:21:
44:49:4d:29:26:31:03:fc:74:da:6d:be:75:02:4b:
f8:a6:62:7e:e0:1e:35:d2:8a:89:34:69:42:97:e2:
df:01:5e:0a:d8:01:01:6d:f8:75:21:f3:61:10:bf:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:4C:A9:DD:73:7E:C9:23:9F:FE:01:27:46:B6:DC:69:7B:F4:BB
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:eb:62:18:9d:de:8a:16:b4:97:3d:53:83:d1:69:5c:23:b9:
c4:31:06:62:70:1e:da:87:43:dc:50:7c:36:36:2f:08:99:f9:
4b:6c:aa:81:ac:15:3f:79:81:e8:0e:31:47:ea:57:62:d2:7c:
ed:d1:61:e3:ef:9a:a9:81:19:46:33:33:8c:2a:0d:58:74:df:
38:2b:7e:11:7a:84:d0:4b:72:8f:e3:64:4a:53:5f:ff:c8:03:
bd:4e:c4:84:07:e8:60:ff:4d:50:ac:89:81:c6:43:4d:ea:2c:
b1:98:c8:cb:5f:68:0e:73:32:8c:c2:e8:ff:22:ec:c2:43:de:
c1:7b:0a:68:f0:80:06:83:f5:45:23:b8:e5:f4:81:4f:cf:6d:
4a:4a:39:5c:4f:cf:98:ec:e4:b2:f0:84:fd:91:09:8e:c1:81:
d9:ce:80:72:f7:43:05:8f:e1:1e:c7:9b:f0:6a:82:48:8d:f7:
ed:34:a7:f0:e0:57:3c:d4:0a:94:d6:bb:8b:e8:57:c3:16:0c:
1c:4b:04:6d:20:05:97:8c:8c:d7:83:01:60:88:2f:69:87:6f:
01:05:16:74:48:fd:e4:2f:54:a0:0f:b4:a4:25:b5:d6:50:9e:
52:19:7a:61:66:56:03:a5:08:b5:a5:79:50:3a:50:07:93:08:
9b:60:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:31:06 2026 by rpki-client